diff --git a/roles/usermanagement/templates/fix_ldap.py b/roles/usermanagement/templates/fix_ldap.py
index aef1a55..f5c2770 100644
--- a/roles/usermanagement/templates/fix_ldap.py
+++ b/roles/usermanagement/templates/fix_ldap.py
@@ -1,3 +1,5 @@
+#!/usr/bin/python3
+
 from ldap3 import Server, Connection, MODIFY_ADD, MODIFY_DELETE
 
 ldap_server = 'ldap://localhost'
@@ -16,7 +18,7 @@ if not conn.bind():
     exit(1)
 
 # handle groups #
-conn.search(groups_base_dn)
+conn.search(groups_base_dn, '(objectClass=*)')
 for entry in conn.entries:
 
     dn = entry.entry_dn